Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: CLwjtSCirLKIPrNdmpVqIpVVsurpKw3YgdNZ/ADfUKc=
Subject key identifier: 68:43:C1:00:41:08:70:B0:9F:2E:C7:6C:59:93:BE:11:B6:B6:BC:C8
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019D2AA9BF79307F86441B80A2B4212A3512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:01:00 +0000
Manifest this update: Thu 26 Mar 2026 15:01:00 +0000
Manifest next update: Fri 27 Mar 2026 15:01:00 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: RWmyLdnv/Jaby47i7kgQAsMDZ5qeVbYa5JBxznjQBws=)
2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:bf:79:30:7f:86:44:1b:80:a2:b4:21:2a:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Mar 26 15:01:00 2026 GMT
Not After : Mar 27 15:01:00 2026 GMT
Subject: CN=6843c100410870b09f2ec76c5993be11b6b6bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:37:45:e0:d0:58:77:e5:cf:a3:71:8e:2a:
a8:b9:65:d2:5a:70:13:bf:85:6e:6d:91:be:75:2a:
ee:00:af:be:7a:ab:9d:9a:4a:91:64:c1:3f:de:cf:
c7:4a:43:56:7c:b1:b7:c3:b3:e5:0f:1d:e8:53:57:
f0:43:fa:33:1d:e4:f9:62:7d:a7:86:7a:4a:d3:12:
6c:d3:c8:67:0a:37:e4:bf:b3:9b:88:fd:b3:8f:ad:
ca:f0:5f:f5:c3:3e:9f:67:a8:cf:6f:49:d7:f9:1f:
ce:70:27:b7:4e:25:fa:4e:a9:8f:0d:87:e1:53:1b:
f2:33:ae:58:39:c6:2d:28:71:79:61:33:81:f2:f0:
c4:77:2a:89:1a:a3:76:77:e5:5c:b8:37:a8:69:4c:
4c:11:74:09:7d:eb:07:c6:8f:f4:79:df:a3:dc:e0:
6f:70:70:64:8e:42:74:ff:28:db:94:07:ab:67:08:
6b:b8:96:9d:c4:73:64:cd:ee:35:45:b1:d9:6e:25:
10:ab:b0:c8:78:b3:23:f0:b4:41:26:ad:28:b4:09:
99:3b:34:bf:b8:b9:04:ce:9a:c5:0e:cd:95:ac:65:
7c:09:42:06:b1:4e:b8:dd:00:d2:7c:c9:93:bf:bc:
7e:ba:ff:a3:bf:c2:ac:40:6c:ae:97:38:49:29:84:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:C1:00:41:08:70:B0:9F:2E:C7:6C:59:93:BE:11:B6:B6:BC:C8
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:79:e8:ad:85:db:38:72:98:6e:7c:08:12:b5:69:ef:40:
64:11:bf:a9:3a:aa:39:b6:2e:84:50:1c:54:d4:36:8c:bb:ae:
f7:40:06:f9:b1:68:d3:86:ef:64:f4:a0:89:3a:65:88:2f:5f:
f7:89:17:0a:b4:19:e1:6e:f0:56:01:e7:dc:47:33:25:12:82:
f0:58:ba:5b:8d:5f:30:74:16:46:04:16:c6:6b:7c:33:b6:4e:
34:a8:bd:99:2d:4d:12:bf:39:27:74:cf:ff:c5:70:61:97:04:
ff:13:23:fb:59:22:c1:1a:57:60:65:a1:b4:48:a8:61:f2:a7:
25:36:15:3e:6a:d0:97:1d:8f:bd:d0:85:be:9c:38:d6:fc:c1:
1f:4e:71:b4:80:20:a1:da:b7:6a:b6:52:1a:8b:b4:40:7e:3a:
4a:e7:97:2d:97:d1:88:de:98:fb:df:45:a7:78:dd:28:13:dc:
68:15:d4:b8:8b:7d:59:b5:b9:40:97:74:75:da:6c:9c:cb:fc:
cf:35:8b:bb:5f:d8:87:31:5d:39:f6:76:1d:30:65:8f:81:d7:
a1:34:c3:9e:0f:b4:70:06:30:83:23:b3:28:fc:37:26:c4:80:
7b:36:80:9f:7c:ed:1f:d4:2e:7d:f5:07:b1:eb:a2:bd:90:57:
cb:4e:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:41 2026 by rpki-client